Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-gw24-5v6p-pvvv

Опубликовано: 22 окт. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

The importFile SOAP method is vulnerable to a directory traversal attack. An unauthenticated remote attacker bypass the path restriction and upload files to arbitrary locations.

The importFile SOAP method is vulnerable to a directory traversal attack. An unauthenticated remote attacker bypass the path restriction and upload files to arbitrary locations.

EPSS

Процентиль: 70%
0.00635
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-35

Связанные уязвимости

CVSS3: 9.8
nvd
4 месяца назад

The importFile SOAP method is vulnerable to a directory traversal attack. An unauthenticated remote attacker bypass the path restriction and upload files to arbitrary locations.

EPSS

Процентиль: 70%
0.00635
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-35